Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: ddx94/DFyQD+r4+74hZUGbGXawfEyR0usWYgzpKMnSM=
Subject key identifier: 7D:C0:8B:36:48:9F:A1:A6:D9:A3:D7:3E:83:86:50:E6:EF:4C:64:9E
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019D26CCAB26C7A7EBDE2024F8B85C4146FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 019F
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: a4DaSx/24WJ220D2mo2o3E98foeJlwMfxZhd+ocByCw=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ab:26:c7:a7:eb:de:20:24:f8:b8:5c:41:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=7dc08b36489fa1a6d9a3d73e838650e6ef4c649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:ab:93:a7:31:c1:47:84:f6:e4:37:9d:20:
5e:be:f5:60:e0:c1:36:f4:f3:7b:dd:19:8f:4e:5e:
9e:66:7d:c7:4a:84:e1:b5:fe:9b:b3:dd:99:e5:fe:
8a:69:b5:8e:cd:a0:f6:26:46:69:5d:9b:83:35:c5:
5b:6c:5d:d9:4d:10:fa:90:6d:60:71:d3:f1:24:ea:
a3:29:25:7f:13:c0:83:79:00:f6:76:36:fe:a7:52:
57:7f:66:fd:b5:e7:86:45:ae:31:5f:b4:01:00:dd:
45:3b:7a:65:25:22:5f:4c:2f:20:36:44:93:cc:bb:
43:17:0d:83:a6:1b:c3:04:4c:62:0d:33:0d:45:d4:
c7:20:63:aa:f2:9e:de:82:78:4c:6d:0f:fd:3b:1a:
a2:f1:2c:b0:ce:e3:fe:e5:a5:00:d8:37:0c:01:18:
24:8a:51:f2:9e:23:94:45:ee:49:7e:1c:18:33:e6:
24:c8:4f:49:9c:c3:bf:16:e2:d1:bc:53:fc:0d:ef:
72:11:94:46:2f:45:e5:58:5c:94:77:66:17:bb:f1:
70:20:5e:b5:4e:35:b0:d3:bb:d0:54:11:a8:07:91:
e0:e4:cd:51:af:4b:02:15:13:ad:03:ca:47:84:e7:
ef:6f:e7:0a:fe:fb:3c:85:24:c0:7e:02:4b:30:3c:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:8B:36:48:9F:A1:A6:D9:A3:D7:3E:83:86:50:E6:EF:4C:64:9E
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:9d:2a:72:cf:c3:29:92:73:a2:bf:05:37:c3:c0:47:d1:
e2:e3:e3:b6:47:3d:87:8a:73:68:fb:4f:e9:fb:cd:ea:95:86:
c3:b9:17:77:83:7d:a3:9b:ad:ab:73:2a:49:37:13:cb:e1:17:
d8:09:f0:bf:bb:70:47:79:71:ae:18:3c:4c:37:1a:b0:e8:a6:
e6:dd:f7:ea:39:37:75:34:b7:d2:21:ef:7a:70:15:9e:c8:8c:
87:cf:eb:d1:84:70:0e:a7:f2:1f:cb:87:23:26:bd:85:ea:98:
61:5c:5d:9d:25:e7:88:9d:37:d2:d7:b9:4f:ab:4d:79:85:e5:
64:42:22:8c:a2:b0:c7:1b:ea:7c:57:48:04:ea:38:51:7d:be:
dc:93:c5:9d:1f:02:2c:1e:ff:65:0d:44:d6:90:11:60:b0:99:
3b:0b:fb:ce:04:5a:4c:8c:10:23:3d:4c:53:09:b9:04:66:e6:
80:e7:bb:06:c4:56:23:63:1c:6b:72:48:c9:44:6d:62:e2:32:
c2:ff:bd:7d:a8:0a:04:25:be:d8:5a:07:2c:25:9a:0f:d3:1e:
bb:1e:c0:bc:26:ed:60:31:c1:f2:f7:2f:fd:d0:57:00:67:2e:
39:23:46:3a:00:df:3b:7f:0b:85:78:b9:b4:8b:90:33:52:e6:
d9:70:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:37 2026 by rpki-client